Listing of Claims: 

1 . (Currently Amended) A method of accessing acc e ss to a service with fast 
authentication and revocable anonymity, characteriz e d in that it comprises comprising the steps 
of: 

i) identifying and registering a client [[(C)]] and providing the client [[him]] with 
means for auth e nticating himself configured to authenticate the client to an anonymous 
certification authority; [[(ACA),]] 

ii) authenticating the client to the anonymous certification authority using the 
means provided in step i) and supplying the client with means configured to enable e nabling the 
client [[him]] to authenticate the client himself anonymously to a server; [[(Se),]] 

iii) authenticating the client by producing an anonymous signature and opening 
and maintaining an anonymous authentication session with the [[a]] serve r, wherein a unique 
anonymous signature is used for each session: [[(Se),]] and 

iv) selectively allowing contact between the server [[(Se)]] and the anonymous 
certification authority [[(ACA)]] to revoke the anonymity of the client [[(C)]] using the 
anonymous signature provided in step iii[[)]]. 

2. (Currently Amended) The [[A]] method according to claim 1, further comprising: 
characterized in that it comprises, before the stop ii), an additional stop of communication 
between the anonymous certification authority [[(ACA)]] and the serve r, before the 
authenticating of the client to the anonymous certification authority, [[(Se)]] whereby the server 
[[(Se)]] presents to said anonymous certification authority [[(ACA)]] a request to obtain means 
enabling verification of the anonymous authentication supplied by a client [[(C)]]. 
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3. (Currently Amended) The [[A]] method according to claim 1, characteriz e d in 
that wherein the step iii [[)]] comprises thr ee stages : 

a first stage in which the client [[(C)]] calculates data formed as ef a series of 
tokens , wherein one of the series of tokens is configured to enable of which one enabl e s a session 
to be opened and [[the]] others of the series of tokens are configured to enable feat the session to 
be maintained; [[,]] 

a second stage in which the client [[(C)]] makes a strong undertaking to the server 
as to the series of tokens; [[,]] and 

a third stage of maintaining the session with the aid of the series of tokens. 

4. (Currently Amended) The [[A]] method according to claim 3, characterized in 
that wherein [[all]] the series of tokens are configured for one-time use and each of the series of 
tokens are strongly interdependent. 

5. (Currently Amended) The [[A]] method according to claim 3, characterized in 
feat wherein the series of tokens are calculated using th e tok e n generation st e p us e s two 
cryptographic primitives , nam e ly a hashing function and a random number . 

6. (Currently Amended) The [[A]] method according to claim 5, charact e rized in 
feat wherein the first token Wj is obtained by applying a hashing function H to a random number, 
the second token is obtained by applying the hashing function to the first token obtained, and 
so on until n tokens W a are obtained: 
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H(W 0 )=W,H(W„. 1 )=W n . 



7. (Currently Amended) The [[A]] method according to claim 3, characterized in 
that wherein the second stage comprises includ e s obtaining an anonymous signature of an 
initialization token [[W -]] enabling authentication of the [[a]] client by the server. 

8. (Currently Amended) The [[A]] method according to claim 7 [[3]], characterized 
in that wherein information such as a numerical value is associated with the initialization token. 

9. (Currently Amended) The [[A]] method according to claim 3, charact e rized in 
that wherein on each new authentication the client [[(C)]] sends the server [[(Se)]] a token of at 
least one unit lower rank than that previously used. 

10. (Currently Amended) The [[A]] method according to claim 3, characteriz e d in 
that wherein on each new authentication the client [[(C)]] sends the server [[(Se)]] a token Wi 
whose rank (i) is s e l e cted to be representative of a the value of an operatio n, for exampl e a 
numb e r of bid increm e nts . 

11. (Currently Amended) The [[A]] method according to claim 3 charact e rized 
in that wherein the steps are i^4s applied to bidding and [[the]] steps of the client [[(C)]] 
submitting an increased bid are effected by sending successive tokens of lower rank. 



12. (Currently Amended) The [[A]] method according to claim L further comprising 
using charact e riz e d in that it us e s a group signature by associating a plurality of identifiers and 
respective private keys with a single group public key. 

13. (Currently Amended) The [[A]] method according to claim 1^ characterized in 
that wherein the anonymous signature is it us e s a blind signature. 

14. (Currently Amended) The [[A]] method according to claim 12, charact e riz e d in 
that wherein a power th e powers to revoke anonymity is shared ar e divid e d between two or more 
authorities. 

15. (Currently Amended) A system adapted to open and maintain an authentication 
session guaranteeing non-repudiation, wherein an anonymous signature unique to the session and 
comprising a series of tokens is used to open and maintain each session, the system comprising: 
charact e riz e d in that it comprises 

means configured adapted to implement three stages: 

a first stage in which [[the]] a client [[(C)]] calculates data form e d of a the 
series of tokens,, of which one of the series of tokens is configured to enable enabl e s a session to 
be opened and another of the series of tokens is configured to enable the oth e rs e nabl e that 
session to be maintained; [[,]] 

a second stage in which the client [[(C)]] makes a strong undertaking to 
the server as to the series of tokens; [[,]] and 

a third stage of maintaining the session with the aid of the series of tokens. 
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16. (Currently Amended) The system A method according to claim 15, charact e rized 
in that wherein the first stage calculates the series of tokens based on tok e n g e n e ration step uses 
two cryptographic primitives, wherein the two cryptographic primitives are namely a hashing 
function and a random number. 

17. (Currently Amended) The system A method according to claim 15, characterized 
in that wherein the system is configured to use it uses a group signature by associating a plurality 
of identifiers and respective private keys with a single group public key. 

18. (Currently Amended) The system A m e thod according to claim 15, characteriz e d 
in that it uses wherein the unique anonymous signature is a blind signature. 

19. (Currently Amended) The system A method according to claim 15, characterized 
in that wherein power th e pow e rs to revoke anonymity is [[are]] divided between two or more 
authorities. 

20. (New) The method according to claim 5, wherein the two cryptographic 
primitives are a hashing function and a random number. 

21. (New) The method according to claim 10, wherein the rank is representative of a 
number of bid increments. 
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